From 0e0c4f58370f25cdd824df06f38865b0d455a183 Mon Sep 17 00:00:00 2001 From: Brooks Davis Date: Mon, 16 Oct 2023 23:35:40 +0100 Subject: certctl: invoke with LOCALBASE set MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit When invoking certctl as part of installworld, set LOCALBASE in the environment to match the build environment. That ensures that LOCABASE is non-empty on systems without the user.localbase sysctl and avoids allowing a system configuration detail to leak into the build. Users who wish to build targeting a non-standard LOCALBASE should ensure it is set in src.conf or similar. Reviewed by: Mina Galić Differential Revision: https://reviews.freebsd.org/D40530 --- Makefile.inc1 | 1 + 1 file changed, 1 insertion(+) (limited to 'Makefile.inc1') diff --git a/Makefile.inc1 b/Makefile.inc1 index 68549d91598d..512c4049fd76 100644 --- a/Makefile.inc1 +++ b/Makefile.inc1 @@ -1489,6 +1489,7 @@ distributeworld installworld stageworld: _installcheck_world .PHONY .if !make(packageworld) && ${MK_CAROOT} != "no" @if which openssl>/dev/null; then \ PATH=${TMPPATH:Q}:${PATH:Q} \ + LOCALBASE=${LOCALBASE:Q} \ sh ${SRCTOP}/usr.sbin/certctl/certctl.sh ${CERTCTLFLAGS} rehash; \ else \ echo "No openssl on the host, not rehashing certificates target -- /etc/ssl may not be populated."; \ -- cgit v1.2.3